Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/B6qJHXpeC3IEJy34_URs46RdWiA.roa
File: B6qJHXpeC3IEJy34_URs46RdWiA.roa (raw, json)
Hash identifier: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=
Subject key identifier: 07:AA:89:1D:7A:5E:0B:72:04:27:2D:F8:FD:44:6C:E3:A4:5D:5A:20
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 019422FC2953C9DE37FEED5EF283304CB1A4
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/B6qJHXpeC3IEJy34_URs46RdWiA.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215914
IP address blocks: 213.132.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:29:53:c9:de:37:fe:ed:5e:f2:83:30:4c:b1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07aa891d7a5e0b7204272df8fd446ce3a45d5a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:e9:5f:ad:4d:1a:9e:37:31:99:f3:0f:e0:
59:a7:7d:46:0d:f3:84:94:0b:26:37:81:a5:a3:7b:
45:bb:41:07:e9:18:0c:86:aa:fe:4d:71:e2:a4:fc:
e6:8e:0e:00:4e:22:a3:47:9f:81:b2:e9:c1:01:ad:
64:e1:bf:44:fb:1c:56:70:fd:96:0a:05:f4:b3:55:
f8:ae:e2:4f:09:9c:ba:3c:c0:97:0f:fa:1e:6b:6d:
dc:21:b7:47:56:3f:19:45:2c:13:f2:31:f5:f0:0b:
29:cc:79:8c:4b:8a:a0:e5:2b:1f:0c:32:3f:b3:ec:
ba:2e:c4:02:29:77:d8:b1:25:5d:5d:77:9f:31:b0:
cc:61:d7:ff:39:b8:7c:8d:49:c9:a7:6a:e8:9a:f5:
41:a2:3d:81:e3:f7:d0:e9:27:0b:95:47:da:b4:5c:
4e:80:92:4d:45:a5:02:0e:a8:8a:6f:9a:88:da:5a:
29:e6:d4:2a:3e:9a:8a:27:cc:47:fc:2a:1d:3b:77:
08:dc:bf:cf:4d:23:56:df:2d:73:5a:c4:59:72:dc:
46:89:dc:39:e0:e4:d0:33:c1:18:d7:26:12:16:81:
29:1a:e9:6d:e0:ea:09:c8:d8:6e:f3:20:6a:7b:6f:
a4:a1:45:db:9a:a8:66:e6:d4:8c:da:cb:a9:bb:4b:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AA:89:1D:7A:5E:0B:72:04:27:2D:F8:FD:44:6C:E3:A4:5D:5A:20
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/B6qJHXpeC3IEJy34_URs46RdWiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.206.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0e:ab:0e:82:f6:56:76:af:19:63:64:ea:86:2b:95:cd:b2:
3e:71:ea:c8:6a:06:4d:46:61:86:a1:36:30:76:49:63:37:ec:
ec:3c:00:0b:0f:a4:1e:aa:be:94:17:df:a6:56:06:2d:eb:7a:
8a:ee:df:28:ce:b7:fc:47:e9:a5:ab:8f:e9:04:a4:ab:f0:87:
8c:26:7b:fd:48:a0:6b:d7:f3:ae:8e:ef:e7:6b:b5:2d:a2:42:
b8:3e:94:30:1d:88:ca:31:cb:08:47:b4:71:25:0b:df:80:43:
83:06:53:f8:e3:89:e3:88:69:52:2c:a1:1e:59:12:9a:41:87:
d3:72:86:9c:75:ce:66:b6:c3:b2:b5:2f:2e:80:b3:67:57:1b:
37:03:91:dc:49:02:eb:64:c4:27:08:d4:d7:71:9a:84:3e:81:
c8:da:b9:7d:42:5b:5e:55:b5:4b:01:2c:4d:11:23:c1:08:36:
65:45:b8:b8:10:b5:65:9d:4d:68:77:41:d9:25:85:15:24:d3:
1a:e8:16:52:fd:e9:22:5d:2e:62:d7:e9:97:74:f4:b3:45:44:
25:9d:f6:eb:fc:e7:4e:dc:e3:6d:ec:03:01:19:43:8b:4c:23:
5b:aa:38:71:37:fd:9f:56:d3:4d:00:4b:20:86:25:80:bb:63:
cf:c0:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:05 2025 by rpki-client